WO2015144041A1

WO2015144041A1 - Network authentication method and device

Info

Publication number: WO2015144041A1
Application number: PCT/CN2015/074961
Authority: WO
Inventors: 赖晓龙; 曹军; 铁满霞
Original assignee: 西安西电捷通无线网络通信股份有限公司
Priority date: 2014-03-27
Filing date: 2015-03-24
Publication date: 2015-10-01
Also published as: CN104955039B; CN104955039A

Abstract

Disclosed are a network authentication method and device. The method comprises: an access network element transmits to a terminal via the access network element the authentication vector information signed with a signature private key of a second network element; the terminal verifies the signature of the authentication vector information, generates two consistency check keys after the verification succeeds, and performs information integrity computation using the two consistency check keys respectively, and then respectively compares with the information integrity computation results transmitted by a first network element and the access network element; if the comparison results are correct, then performing information integrity computation using the two consistency check keys respectively again and transmitting the computation results to the access network element and the first network element; the access network element and the first network element each use their respective generated consistency check keys to perform information integrity computation and compares the computed result with the computed results transmitted by the terminal, thus realizing authentication. The present invention ensures the security of authentication vector information during transmission and the reliability of authentication.

Description

Method and device for network authentication authentication

This application claims the priority of the Chinese Patent Application filed on March 27, 2014, the Chinese Patent Office, Application No. 201410120400.6, entitled "A Method and Apparatus for Network Authentication Authentication", the entire contents of which are incorporated by reference. In this application.

Technical field

The present application relates to the field of communications technologies, and in particular, to a network authentication and authentication method and device.

Background technique

The AKA protocol is adopted in the authentication and authentication phase of the Long Term Evolution (LTE) network. In the existing LTE network, there are security vulnerabilities in the authentication and authentication phase, which are embodied in:

The authentication vector is vulnerable to attack during the delivery process. In particular, when the terminal roams across the public land mobile network (PLMN), in order to authenticate the terminal, the network element of the home network sends the authentication vector to the network element of the roaming network. In this process, the authentication vector traverses different networks and is vulnerable to attack.

Summary of the invention

The purpose of the application is to provide a method and device for network authentication authentication to solve the security problem existing in the LTE network authentication and authentication phase.

The purpose of this application is achieved by the following technical solutions:

A method for network authentication and authentication includes:

The terminal generates a second temporary public-private key pair, and sends a terminal hello message and a terminal key exchange message to the access network element, where the terminal hello message includes a terminal identifier and a terminal random number, and the terminal key exchange message includes the second temporary public key;

The access network element sends the terminal hello message, the terminal key exchange message, and the access network element hello message to the first network element, where the access network element hello message includes an access network element identifier and access The backward number of the network element;

The first network element sends the terminal hello message, the access network element greeting message, and the first network element backward greeting message to the second network element, where the first network element backward greeting message includes the first The network element returns a random number and a first network element to sign a certificate;

The second network element sends the authentication vector information to the first network element, where the information required for the terminal verification in the authentication vector information is signed by using the second network element signature private key;

The first network element acquires the authentication vector information;

The first network element generates a first temporary public-private key pair and a first network element forward greeting message including a first network element forward random number, and uses the obtained authentication vector information, the second temporary public key, and the Generating a first consistency check key by using the first network element exchange private key and the first temporary private key, and using the first consistency check key to send the terminal greeting message and the first network element forward The hello calculation of the hello message generates a first message integrity calculation result, and sends the authentication vector information, the first network element key exchange message including the first temporary public key, and the first network to the access network element. The meta-forward greeting message and the first message integrity calculation result;

The access network element generates an access network element temporary public-private key pair and an access network element forward greeting message including a forward random number of the access network element, and uses the obtained authentication vector information and the second temporary public key. The access network element exchange private key and the access network element temporary private key generate an access consistency check key, and use the access consistency check key to the terminal hello message and the access network element. Performing integrity calculation on the forward greeting message to generate an access message integrity calculation result, and transmitting the authentication vector information, the access network element key exchange message including the access network element temporary public key, and the access to the terminal a network element forward greeting message, an access message integrity calculation result, the first network element forward greeting message, and the first message integrity calculation result;

The terminal verifies the signature in the received authentication vector information by using the saved signature certificate of the second network element;

After the verification is successful, the terminal generates a second consistency check key by using the authentication vector information, the terminal identifier, the first temporary public key, the terminal exchange private key, and the second temporary private key. And generating, by using the authentication vector information, the terminal identifier, the access network element temporary public key, the terminal exchange private key, and the second temporary private key, a third consistency check key;

The terminal uses the second consistency check key to perform message integrity calculation on the terminal hello message and the first network element forward greeting message to generate a second message integrity calculation result, and complete the second message complete The result of the calculation is compared with the result of the first message integrity calculation sent by the first network element. After the comparison is correct, the generated second consistency check key is used to forward the first network element to the greeting message and The second message integrity calculation is performed by the terminal greeting message to generate a third message integrity calculation result;

The terminal uses the third consistency check key to perform message integrity calculation on the terminal hello message and the access network element forward greeting message to generate a fourth message integrity calculation result, and complete the fourth message complete The result of the calculation is compared with the calculation result of the integrity of the access message sent by the access network element. After the comparison is correct, the third consistency check key is used to access the NE forward greeting message and The terminal hello message performs a message integrity calculation to generate a fifth message integrity calculation result;

Transmitting the fifth message integrity calculation result to the access network element, and sending the third message integrity calculation result to the first network element by using the access network element;

The access network element uses the access consistency check key to perform a message integrity calculation on the access NE forward greeting message and the terminal hello message, and generates a sixth message integrity calculation result, using the sixth message complete. Sexual calculation result After the fifth message integrity calculation result is verified, after the verification succeeds, the access network element authentication success message is sent to the terminal;

The first network element performs a message integrity calculation on the first network element forward greeting message and the terminal greeting message by using the first consistency check key to generate a seventh message integrity calculation result, and uses the generated The seventh message integrity calculation result verifies the third message integrity calculation result; after the verification is successful, the first network element sends the first network element authentication success message to the terminal by using the access network element.

Preferably, in the initial authentication phase of the terminal, the second network element sends the authentication vector information to the first network element, which specifically includes:

The second network element searches for an exchange public key of the terminal corresponding to the terminal identifier;

Sending, by the second network element, the access NE greeting message, the first network element backward greeting message, the terminal identifier, and the exchange public key of the terminal to the query center;

Obtaining, by the query center, the exchange public key of the first network element corresponding to the first network element identifier, and verifying the first network element signature certificate, and acquiring the exchange public key of the access network element corresponding to the access network element identifier Generating a message carrying the first network element's signature certificate and the verification result, the terminal identifier, and the exchanged public key of the terminal, and signing the first network element to the hello message and the generated message, for the access The NE greeting message is signed, and the two signatures, the exchange public key of the first network element, the first network element identifier, the exchange public key of the access network element, and the access network element Sending an identifier to the second network element;

After the second network element uses the signature certificate of the query center to verify that the signature is correct, the second network element sends the authentication vector information to the first network element, where the authentication vector information includes: an exchange public key of the access network element, The exchange public key of a network element, the terminal identifier, the exchange public key of the terminal, and the signature of the terminal greeting message, the exchange public key of the access network element, and the exchange public key of the first network element by using the second network element signature private key Using the signature private key of the query center to sign the access NE greeting message, the terminal identifier, the exchange public key of the terminal, the exchange public key of the access network element, and the exchange public key of the first network element, using the query center The signature of the signature private key to the first network element to the hello message, the terminal identifier, and the exchange public key of the terminal;

Before the first network element generates the first temporary public-private key pair and the first network element forward greeting message including the first network element forward random number, the method further includes:

The first network element uses the saved certificate of the query center to verify the signature of the first network element to the hello message, the terminal identifier, and the exchange public key of the terminal, so that after the verification succeeds, the first temporary public-private key pair is generated. a first network element forward greeting message including a forward random number of the first network element;

Before the access network element generates the access network element temporary public-private key pair and the access network element forward greeting message including the forward random number of the access network element, the method further includes:

The access network element verifies the signatures of the access NE greeting message, the terminal identifier, the exchange public key of the terminal, the exchange public key of the access network element, and the exchange public key of the first network element, so that after the verification succeeds, Generating a first temporary public-private key pair and a first network element forward greeting message including a first network element forward random number.

Further, the authentication vector information further includes the first network element signature certificate and the verification result thereof, and the use Signing of the first network element signature certificate and its verification result by the signature private key of the second network element, the terminal signing the received authentication vector information by using the saved signature certificate of the second network element After the verification is successful, the method further includes: the terminal acquiring and saving the signature certificate of the first network element; and/or, the authentication vector information further includes: the first network element signature certificate and a verification result, and a signature of the first network element signature certificate and the verification result thereof by using the signature private key of the query center; when the access network element uses the signature certificate of the query center for verification, the method further includes The access network element uses the saved signature of the query center to verify the signature of the first network element signature certificate and the verification result thereof. After the verification succeeds, the signature certificate of the first network element is saved.

Preferably, in the tracking area update phase, the authentication vector information includes:

The exchange public key of the access network element, the exchange public key of the first network element, the terminal identifier, the exchange public key of the terminal, the use of the signature private key of the second network element, the exchange of the terminal, the exchange of the public key of the access network element, and The signature of the exchanged public key of the first network element and the signature of the first network element to the greeting message, the terminal identifier, and the exchange public key of the terminal by using the second network element signature private key.

Further, the authentication vector information further includes a first network element signature certificate and a verification result thereof, and the first network element signature certificate and the verification result thereof are performed by using the signature private key of the second network element. After the terminal successfully verifies the signature of the received authentication vector information by using the saved signature of the second network element, the method further includes: the terminal acquiring and saving the signature certificate of the first network element And/or, the authentication vector information further includes the first network element signature certificate and a verification result thereof; the first network element sends the authentication vector information, the first network element to the access network element When the key exchange message, the first network element forward greeting message, and the first message integrity calculation result, the first network element signature certificate and the verification thereof are sent to the access network element by using the first network element signature private key. a result of the signature; before the access network element generates the access network element temporary public-private key pair and the access network element forward greeting message including the forward random number of the access network element, the method further includes: the accessing The network element uses the first network element The signature certificate verifies the signature, so that after the verification succeeds, the access network element temporary public-private key pair and the access network element forward greeting message including the forward random number of the access network element are generated.

A terminal comprising:

The authentication message sending module is configured to generate a second temporary public-private key pair, and send a terminal greeting message and a terminal key exchange message to the access network element, where the terminal hello message includes a terminal identifier and a terminal random number, and the terminal key The exchange message contains a second temporary public key;

An authentication module, configured to verify, by using the saved signature certificate of the second network element, the received signature in the authentication vector information;

a key generation module, configured to use the authentication vector information, the terminal identifier, the first temporary public key, the terminal exchange private key, and the second temporary private key after the authentication module succeeds Generating a second consistency check key, and generating a third by using the authentication vector information, the terminal identifier, the access network element temporary public key, the terminal exchange private key, and the second temporary private key Consistency check key;

a message integrity check module, configured to perform a message integrity calculation on the terminal hello message and the first network element forward greeting message by using the second consistency check key to generate a second message integrity calculation result, where The second message integrity calculation result is compared with the first message integrity calculation result sent by the first network element, and after the comparison is correct, the generated second consistency check key is used to match the first network element. Performing a second message integrity calculation on the forward message and the terminal greeting message to generate a third message integrity calculation result; using the third consistency check key to send the terminal greeting message and the access network element forward greeting The message integrity calculation is performed to generate a fourth message integrity calculation result, and the fourth message integrity calculation result is compared with the access message integrity calculation result sent by the access network element, and after the comparison is correct, the message is used. Generating the third consistency check key to generate a fifth message integrity calculation result by performing message integrity calculation on the access network element forward greeting message and the terminal greeting message; Message integrity calculation result is sent to the access network element, to the first network element and the third message is sent via the integrity evaluation result of the access network element.

An access network element includes:

The authentication message transmission module is configured to receive a terminal greeting message and a terminal key exchange message sent by the terminal, where the terminal greeting message includes a terminal identifier and a terminal random number, and the terminal key exchange message includes a second temporary public key; The first network element sends the terminal hello message, the terminal key exchange message, and the access network element greeting message, where the access network element greeting message includes an access network element identifier and a backward random number of the access network element;

The authentication module is configured to generate an access network element temporary public-private key pair and an access network element forward greeting message including the access network element forward random number, and use the obtained authentication vector information and the second temporary public key The access network element exchange private key and the access network element temporary private key generate an access consistency check key, and use the access consistency check key to the terminal hello message and the access network element. Performing integrity calculation on the forward greeting message to generate an access message integrity calculation result, and transmitting the authentication vector information, the access network element key exchange message including the access network element temporary public key, and the access to the terminal a network element forward greeting message, an access message integrity calculation result, the first network element forward greeting message, and the first message integrity calculation result; and access using the access consistency check key pair The message integrity calculation is performed by the network element forward greeting message and the terminal greeting message to generate a sixth message integrity calculation result, and the sixth message integrity calculation result is used to verify the fifth message integrity calculation result sent by the terminal, and the verification result is verified. After the terminal to access network element transmits the authentication success message.

A first network element, including:

The authentication message transmission module is configured to receive a terminal greeting message, a terminal key exchange message, and an access network element greeting message sent by the access network element, where the terminal hello message includes a terminal identifier and a terminal random number, and the terminal key The exchange message includes a second temporary public key, where the access network element greeting message includes an access network element identifier and a backward random number of the access network element, and sends the terminal hello message to the second network element, where the access message a network element greeting message and a first network element backward greeting message, where the first network element backwards greeting message includes a first network element, and then a random number and a first network element signature certificate;

The authentication vector information acquiring module is configured to obtain the authentication vector information, where the information required to be verified by the terminal in the authentication vector information is signed by using the second network element signature private key;

An authentication module, configured to generate a first temporary public-private key pair and a first network element forward greeting message including a first network element forward random number, using the obtained authentication vector information, the second temporary public key, and the Generating a first consistency check key by using the first network element exchange private key and the first temporary private key, and using the first consistency check key to send the terminal greeting message and the first network element forward The hello calculation of the hello message generates a first message integrity calculation result, and sends the authentication vector information, the first network element key exchange message including the first temporary public key, and the first network to the access network element. a meta-forward greeting message and a first message integrity calculation result; and performing a message integrity calculation on the first network element forward greeting message and the terminal greeting message using the first consistency check key to generate a seventh message The integrity calculation result is used to verify the third message integrity calculation result sent by the terminal by using the generated seventh message integrity calculation result; after the verification is successful, the first network element passes the access network element to the terminal Send first Yuan authentication success message.

A second network element, including:

The authentication vector information sending module is configured to send the authentication vector information to the first network element, where the information required for the terminal verification in the authentication vector information is signed by using the second network element signature private key.

A query center that includes:

An information acquiring module, configured to acquire an exchange public key of the first network element corresponding to the first network element identifier, and verify the first network element signature certificate, and obtain an exchange of the access network element corresponding to the access network element identifier Public key

The information sending module is configured to generate a message carrying the first network element's signature certificate and the verification result, the terminal identifier, and the exchanged public key of the terminal, and sign the first network element back greeting message and the generated message, Signing the access NE greeting message, the two signatures, the exchange public key of the first network element, the first network element identifier, the exchange public key of the access network element, and the The access network element identifier is sent to the second network element.

The method, system and device provided by the embodiments of the present application, the authentication vector transmitted in the network is signed by the signature private key, and the authentication parties use the consistency check key to perform message integrity calculation, and then verify the result of the message integrity calculation. The authentication is implemented to ensure the security of the authentication information in the process of transmission and the reliability of authentication.

DRAWINGS

FIG. 1 is a flowchart of a method provided by an embodiment of the present application;

2 is a signaling diagram of an initial authentication phase authentication method provided by an embodiment of the present application;

FIG. 3 is a signaling diagram of a TAU phase authentication method according to an embodiment of the present application;

4 is a schematic structural diagram of a system according to an embodiment of the present application;

FIG. 5 is a schematic diagram of a terminal according to an embodiment of the present application;

FIG. 6 is a schematic diagram of an access network element according to an embodiment of the present disclosure;

FIG. 7 is a schematic diagram of a first network element according to an embodiment of the present application;

FIG. 8 is a schematic diagram of a second network element according to an embodiment of the present application;

FIG. 9 is a schematic diagram of a query center according to an embodiment of the present application.

detailed description

In order to improve the security of the LTE network authentication process and avoid the theft or tampering of the authentication parameters in the process of the transmission between the network elements, the embodiment of the present application provides a network authentication authentication method. The authentication vector passed between the elements is signed by the signature private key, and the authentication parties use the consistency check key to perform message integrity calculation, and then verify the message integrity calculation result to ensure the authentication information is transmitted. Security in the process and reliability of authentication.

The technical solutions provided by the embodiments of the present application are described in detail below with reference to the accompanying drawings.

A network authentication and authentication method provided by the embodiment of the present application is as shown in FIG. 1 , and specifically includes the following operations:

Step 100: The terminal generates a second temporary public-private key pair, and sends a terminal hello message including a terminal identifier and a terminal random number to the access network element, and a terminal key exchange message including the second temporary public key.

Step 110: The access network element sends a terminal hello message, a terminal key exchange message, and an access NE greeting message including the access network element identifier and the access network element backward random number to the first network element.

Step 120: The first network element sends a terminal hello message, an access NE greeting message, and a first network element backward greeting message including the first network element to the random number and the first network element signature certificate to the second network element.

Step 130: The second network element sends the authentication vector information to the first network element, where the information that needs to be sent to the terminal in the authentication vector information is signed by using the second network element signature private key.

Step 140: The first network element acquires the authentication vector information.

Step 150: The first network element generates a first temporary public-private key pair and a first network element forward greeting message that includes a first network element forward random number, and uses the obtained authentication vector information, the second temporary public The first consistency check key is generated by the key, the first network element exchange private key, and the first temporary private key, and the terminal greeting message and the first network are used by using the first consistency check key. Performing an integrity calculation on the hello message to generate a first message integrity calculation result, and transmitting the authentication vector information, the first network element key exchange message including the first temporary public key, and the first to the access network element. The NE forward greeting message and the first message integrity calculation result.

Step 160: The access network element generates an access network element temporary public-private key pair and an access network element forward greeting message including a forward random number of the access network element, and uses the obtained authentication vector information, the second The temporary public key, the access network element exchange private key, and the access network element temporary private key generate an access consistency check key, and use the access consistency check key to greet the terminal with the message The integrity calculation of the incoming message to the hello message generates an access message integrity calculation result, and sends the authentication vector information, the access network element key exchange message including the access network element temporary public key, and the connection to the terminal. The incoming NE forward greeting message, the access message integrity calculation result, and the first network element forward greeting message, and the first message integrity calculation result.

Step 170: The terminal verifies the signature in the received authentication vector information by using the saved signature certificate of the second network element.

Step 180: After the verification succeeds, the terminal generates the second consistency by using the authentication vector information, the terminal identifier, the first temporary public key, the terminal exchange private key, and the second temporary private key. Checking a key, and generating a third consistency check key by using the authentication vector information, the terminal identifier, the access network element temporary public key, the terminal exchange private key, and the second temporary private key .

Step 190: The terminal uses the second consistency check key to perform a message integrity calculation on the terminal hello message and the first network element forward greeting message to generate a second message integrity calculation result, where the second message is sent. The integrity calculation result is compared with the first message integrity calculation result sent by the first network element, and after the comparison is correct, the generated second consistency check key is used to forward the first network element forward greeting message. Performing a second message integrity calculation with the terminal hello message produces a third message integrity calculation result.

The terminal uses the third consistency check key to perform message integrity calculation on the terminal hello message and the access network element forward greeting message to generate a fourth message integrity calculation result, where the fourth message integrity calculation is performed. The result is compared with the calculation result of the integrity of the access message sent by the access network element. After the comparison is correct, the generated third-party consistency check key is used to access the NE forward greeting message and the terminal greeting. The message integrity calculation calculates a fifth message integrity calculation result.

Transmitting the fifth message integrity calculation result to the access network element, and sending the third message integrity calculation result to the first network element by using the access network element.

Step 1100: The access network element uses the generated access consistency check key to perform a message integrity calculation on the access NE forward greeting message and the terminal hello message to generate a sixth message integrity calculation result, and uses the generated The sixth message integrity calculation result verifies the fifth message integrity calculation result sent by the terminal.

After the verification succeeds, the access network element authentication success message is sent to the terminal.

Step 1110: The first network element performs a message integrity calculation on the first network element forward greeting message and the terminal greeting message by using the generated first consistency check key to generate a seventh message integrity calculation result, which is generated by using The seventh message integrity calculation result verifies the third message integrity calculation result sent by the terminal.

After the verification is successful, the first network element sends a first network element authentication success message to the terminal by using the access network element.

If the authentication authentication process is applied to the initial authentication phase of the terminal in the LTE network, the access network element is an evolved base station (eNodeB), and the first network element is a mobility management entity (MME), where the The second network element is a home subscriber server (HSS, Home Subscriber Server).

If the authentication process is applied to the authentication of the Tracking Area Update (TAU) phase in the LTE network, the access network element is an eNodeB, and the first network element is the target MME, and the second network element is To serve the MME.

The method provided by the embodiment of the present application is described in detail below by taking the authentication of the LTE network as an example.

To implement the technical solution provided by this application, you need to deploy the following in the live network:

Deploy a Certificate Authority (CA) and a Query Center (QueC).

The operator can deploy one QueC for each PLMN according to networking requirements, or deploy one or more QueCs for each province. The QueC is used to store the exchange public key h _eNB of the eNodeB in the management domain, the exchange public key h _{MME of the MME,} and the MME's signature certificate, and query the exchanged public key of the eNodeB of the designated management domain under the jurisdiction of the other network element. h _eNB, MME exchange the signed certificate and public key h _MME MME or interact with other central administrative domain of inquiry, access to other management domains eNodeB to exchange public keys h _eNB, MME exchange h _MME public key and signed certificate.

Each operator issues a certificate to the network element in its deployed LTE network through its deployed CA:

The CA issues two certificates for the HSS in the LTE network. One is the signature certificate, the signature certificate contains the signature public key of the HSS, and the other is the encryption certificate. The encryption certificate stores the encrypted public key of the HSS. In the authentication and authentication phase, the authentication center (AuC) in the HSS participates in the authentication and authentication process. It can be understood that the signature certificate of the HSS described in this application is actually the signature certificate of the AuC, and the signature public key of the HSS is actually The signature public key of AuC, the encryption certificate of HSS is actually the encryption certificate of AuC, and the encryption public key of HSS is actually the encryption public key of AuC.

The CA issues a signature certificate to the MME, and the signature certificate stores the signature public key of the MME.

The CA issues a signed certificate to the QueC, and the signed certificate stores the signature public key of the QueC.

The network element MME in the LTE network stores public and private key pairs (h _MME , P _MME ) for key exchange, its own signature certificate, signature private key, and stores the signature certificate of QueC.

The network element eNodeB in the LTE network stores public and private key pairs (h _eNB , P _eNB ) for key exchange, and stores the signature certificate of the QueC.

The US Subscriber Identity Unit (USIM) card stores a public and private key pair (h _U , P _U ), HSS encryption certificate and signature certificate for key exchange.

The HSS stores its own signature certificate, signature private key, its own encryption certificate, and encryption private key, and stores the signature certificate of QueC and the exchange public key h _{U of the} terminal.

Based on the foregoing network deployment, the initial authentication phase of applying the method provided by the embodiment of the present application is as shown in FIG. 2, and includes the following operations:

Step 200: The terminal (UE) generates a second temporary public-private key pair, and sends a message Msg1 to the eNodeB.

The message Msg1 includes a UE Hello message and a UE Key message, and the message format can be:

In the initial authentication phase, the terminal identity may be, but is not limited to, the International Mobile Subscriber Identification Number (IMSI) of the terminal.

Optionally, the terminal may encrypt the IMSI and the UE.Nounce of the terminal by using an encrypted public key (PK _HSS ) of the _HSS , and correspondingly, UE.ID=(IMSI&0x7FF0, EnC(PK _HSS , IMSI, UENounce)), EnC ( PK _HSS , IMSI, UE.Nounce) indicates that the IMSI and UE.Nounce of the terminal are encrypted using the encrypted public key of the HSS.

Step 210: After receiving the Msg1, the eNodeB adds the information and sends the Msg2 to the MME.

The message Msg2 includes a terminal hello (UE Hello) message, a terminal key exchange (UE Key) message, and an access network element hello message (eNodeB Hello), and the message format may be:

Step 220: After receiving the foregoing Msg2, the MME determines the HSS of the terminal.

If the information in Msg2 is not encrypted using the encrypted public key of the HSS, the MME may determine the HSS based on the IMSI of the terminal. If the information in Msg1 is encrypted using the encrypted public key of the HSS, the MME may determine the HSS based on IMSI&0x7FF0.

Step 230: The MME sends a message Msg3 to the HSS of the terminal.

The message Msg3 includes the UE Hello message, the eNodeB Hello message, and the MME Hello message (MME Hello) message, and the message format may be:

Step 240: After receiving the Msg3, the HSS searches for the h _U corresponding to the IMSI.

Specifically, the HSS queries the correspondence between the IMSI stored in the database and the exchanged public key of the terminal, and obtains the h _U corresponding to the IMSI.

If the terminal identifier is encrypted, the HSS decrypts the EnC (PK _HSS , IMSI, UE.Nounce1) using the HSS encrypted private key before querying the database, obtains the IMSI of the terminal, and then queries the terminal to exchange the public key h _U .

Step 250: The HSS sends the eNodeB Hello message and the MME Hello message to the query center, and sends the terminal IMSI plaintext and the terminal exchange public key h _U to the query center.

Step 260: The query center obtains the MME identity (MME.ID) according to the signature certificate of the MME, queries the exchange public key (h _MME ) of the corresponding _MME , and verifies the MME signature certificate (MME.Cert), and queries the corresponding eNodeB according to the eNodeB ID. The public key (h _eNB ) is exchanged to generate a QUE-AACResp (query response message), the QUE-AACResp includes the MME.CertResult and the AS-UE-MME.Keyinfo, and the MME.CertResult carries the MME's signature certificate and the verification result, and the AS - UE-MME.Keyinfo carries the terminal IMSI plaintext and the terminal exchange public key, and then the query center signs the MME Hello message and QUE-AACResp, and also signs the eNodeB Hello message and QUE-AACResp, and two signatures, MME The exchange public key, the MME identity (MME.ID), the exchange public key of the eNodeB, and the eNodeB identity (eNodeB.ID) are sent to the HSS.

Optionally, the query center may also sign the exchange public key of the MME, the MME.ID, the exchange public key of the eNodeB, and the eNodeB.ID, and send the signature to the HSS.

Specifically, if the eNodeB and the MME are in the management domain of the query center, the query center searches the database for the exchange public key and the signing certificate of the eNodeB and the MME. If the eNodeB and the MME are not in the management domain of the query center, the query center obtains the eNodeB exchange public key and the exchange public key h _MME and the signature certificate of the h _eNB and the MME through interaction with other query centers.

Step 270: After verifying that the signature is correct by using the signature certificate of the query center, the HSS sends a message Msg4 to the MME.

Msg4 carries authentication vector information, and its message format can be:

QUE-eNB.Sig (eNodeB Hello, QUE-AACResp, HSS-UEResP) // Signature using the signature private key of the query center

QUE-MME.Sig(MME Hello, QUE-AACResp)//Signature using the signature private key of the query center

Step 280: After receiving the Msg4, the MME uses the signature certificate of the query center to verify that the signature of the QUE-MME.Sig is correct, indicating that the data is valid.

In the embodiment of the present application, the signature of the signature private key of the query center is verified by using the signature certificate of the query center. Specifically, the signature of the signature private key based on the query center is verified by using the signature public key saved in the signature certificate of the query center.

Step 290: The MME generates a first temporary public-private key pair (x, xP) for key exchange and a first network element forward greeting message including a first network element forward random number, using IMSI, MME.ID, and MME. Exchange private key, first temporary private The key (x), the terminal exchange public key, and the second temporary public key (zP) generate a first consistency check key, and use the first consistency check key to perform UE_Hello and the first network element forward greeting message. The integrity calculation produces a first message integrity calculation result and sends a message Msg5 to the eNodeB.

The message Msg5 includes authentication vector information, a first network element key exchange (MME-UEKey) message including a first temporary public key, and a first network element forward greeting message (MME-UEHello), and first message integrity. Calculation result (MMEFinish).

The message format is as follows:

The specific implementation manner of the MME to generate the first consistency check key may be, but is not limited to, the following technical means:

Calculating a third key seed by multiplying P _MME and zP, multiplying h _U and x to calculate a fourth key seed, and performing one-way operation on the third key seed and the fourth key seed Obtaining a key Key; the MME generates a first consistency check key IK _ASME by using the Key, IMSI, MME.ID, terminal random number UE.Nounce, MME forward random number MME-UE.Nounce, using The IK _ASME performs integrity calculation on the UEHello of the Msg1 and the MME forward greeting message generated by the MME to obtain a first message integrity calculation result, and the integrity algorithm may be implemented by using a well-known HMAC function or a cryptographic function, and the integrity calculation described later should be Use the same integrity algorithm as this step.

That is, the DH key exchange algorithm is used, and the exchange public key and the temporary public private key of the terminal and the MME are subjected to dot multiplication and then hashed to obtain the key Key, Key=Hash(h _U x||P _MME zP), and then the key is used. The derived function KDF (Key, IMSI, MME identifier MME.ID, terminal random number UE.Nounce, MME forward random number MME-UE.Nounce) respectively generate a first consistency check key (IK _ASME ) defined by the 3GPP specification K _{ASME is} then extended according to the key extension method defined by 3GPP.

Step 2100: After receiving the message, the eNodeB uses the signature certificate of the query center to verify that the signature of the QUE-eNB.Sig is correct, and saves the signature certificate of the MME. The eNodeB generates an access network element temporary public-private key pair (y, yP) for key exchange and an access network element forward greeting message including the access network element forward random number, using IMSI, eNodeB.ID, eNodeB The exchange private key, the access network temporary private key (y), the terminal exchange public key, and the second temporary public key (zP) generate an access consistency check key, and use the access consistency check key pair UE_Hello to connect The integrity calculation of the incoming message to the hello message generates an access message integrity calculation result, and sends a message Msg6 to the terminal.

The message Msg6 includes authentication vector information, a first network element key exchange (MME-UEKey) message including a first temporary public key, and a first network element forward greeting message (MME-UEHello), and a first integrity calculation. The result (MMEFinish), there is also an access network element key exchange (eNodeB-UEKey) message including the access network element temporary public key and the access network element forward greeting message (eNodeB-UEHello), and access message integrity. Calculate the result (eNodeBFinish).

The message format is as follows:

The specific implementation manner of the eNodeB to generate the access consistency check key is the same as that of the MME, but the MME information is replaced by the eNodeB information, and the IKeNB, the KeNB, and the NKeNB are generated, and extended according to the key extension method defined by the 3GPP.

Step 2110: The terminal receives the message Msg6, and uses the HSS signature certificate to verify the HSS-UE.Sig. After the verification succeeds, the information in the Msg6, the IMSI, the first temporary public key (xP), the terminal exchange private key, and the second temporary private are utilized. The key (z) generates a second consistency check key, and uses the second consistency check key to perform integrity calculation on the UE_Hello and the first network element forward greeting message to generate a second message integrity calculation result, which will be The second message integrity calculation result is compared with the first message integrity calculation result sent by the MME. After the comparison is correct, the first network element forward greeting message and the UE_Hello are performed by using the generated second consistency check key. The secondary message integrity calculation produces a third message integrity calculation result.

The terminal generates a third consistency check key by using the information in the Msg6, the IMSI, the access network temporary public key (yP), the terminal exchange private key, and the second temporary private key (z), and uses the third consistency. Check key pair UE_Hello and eNodeB The integrity calculation of the forward greeting message generates a fourth message integrity calculation result, and compares the fourth message integrity calculation result with the access integrity calculation result sent by the eNodeB. After the comparison is correct, the generated third one is used. The certificate check key generates a fifth message integrity calculation result for the eNodeB forward greeting message and the UE Hello message integrity calculation.

The terminal sends Msg7 to the eNodeB.

The order of input fields is different when the terminal performs message integrity calculation twice. For example, when performing the message integrity calculation for the first time, first input the first network element forward greeting message, and then input the UE Hello; when performing the second message integrity calculation, first input UE_Hello, and then input the first network element forward. Greeting message.

The message format of the message Msg7 is as follows:

The specific implementation manner in which the terminal uses the information in the Msg6, the IMSI, the xP, the terminal exchange private key, and the z to generate the second consistency check key may be, but is not limited to, the following technical means:

Calculating the first key seed by multiplying P _U and xP, multiplying h _MME and z to calculate a second key seed, and performing one-way operation on the first key seed and the second key seed Obtaining a key Key; the terminal uses the Key, the IMSI, the MME to identify the MME.ID, the terminal random number UE.Nounce, and the MME forward random number MME-UE.Nounce to generate a second consistency check key IK _ASME .

Further, the terminal also saves CertMME.

The specific implementation manner in which the terminal uses the information in the Msg6, the IMSI, the yP, the terminal exchange private key, and the z to generate the third consistency check key may be, but is not limited to, the following technical means:

Calculating the fifth key seed by multiplying P _U and yP, multiplying the h _eNodeB and z to calculate a sixth key seed, and performing a one-way operation on the fifth key seed and the sixth key seed. Obtaining a key Key; the terminal generates a third consistency check key IK _eNB by using the Key, IMSI, eNodeB. ID, terminal random number UE.Nounce, and eNodeB forward random number eNodeB-UE.Nounce.

Step 2120: After receiving the Msg7, the eNodeB uses the access consistency check key IK _eNB to perform an integrity calculation on the eNodeB forward hello message and the UE_Hello to generate a sixth message integrity calculation result, which is compared with the UE-eNodeB.Mic of the Msg7. For verification, verify correctly, send Msg8 to MME.

The message format is as follows:

UE-MMEFinish // UE end information to the MME

Step 2130: After receiving the Msg8, the MME performs the seventh message integrity calculation result by performing the integrity calculation on the MME forward greeting message and the UE_Hello using the first consistency check key IK _ASME , and performs the UE-MME.Mic with the Msg7. Alignment verification.

Step 2140: The MME sends the Msg9 to the UE by using the eNodeB.

If Msg7 is verified correctly, Msg9 is an authentication success message, otherwise it is a failure message.

Based on the foregoing network deployment, the TAU stage of the method provided by the embodiment of the present application is as shown in FIG. 3, and includes the following operations:

Step 300: The UE generates a second temporary public-private key pair, and transmits Msg1 to the network.

The message format of the Msg1 is as follows:

In the TAU phase, the Globally Unique Temporary Identity (GUTI) is the UE.ID.

Step 310: After receiving the Msg1, the eNodeB adds the information and sends the Msg2 to the target MME.

The message Msg2 includes a terminal hello (UE Hello) message, a terminal key exchange (UE Key) message, and an eNodeB hello message (eNodeB Hello), and an access network element key exchange (eNodeBkey). The message format may be:

Step 320: After receiving the Msg2, the target MME (MMEn) determines the currently served MME (MMEo) according to the GUTI, and sends the Msg3 to the MMEo.

The message format of the Msg3 is as follows:

In step 330, MMEo receives Msg3 and returns Msg4 to MMEn.

The message format of the Msg4 is as follows:

The MMEn.CertResult includes the CertMMEn and the verification result thereof, and the AS-MME-UE.Keyinfo includes the MMEn exchange public key h _MMEn , and the AS-UE-MME includes the terminal exchange public key hu and the terminal identifier.

Step 340, MMEn receives Msg4, and obtains h _U .

Since the MMEn trusts the MMEo, the communication channel between them is protected, so that it is not necessary to perform signature verification on the information sent by the MMEo.

Step 350: The MMEn generates a first temporary public-private key pair (x, xP) for key exchange and an MMEn forward greeting message including an MMEn forward random number, and exchanges a private key by using UE.ID, MMEn.ID, and MMEn. The first temporary private key, the terminal exchange public key, and the second temporary public key generate a first consistency check key, and use the consistency check key to perform integrity calculation on the UE_Hello and MMEn forward greeting messages to generate a first message complete. Sexually calculate the result and send Msg5 to the eNodeB.

The message structure of the Msg5 is as follows:

MMEn-UE.Mic (UE Hello, MMEn-UEHello)// carries the first message integrity calculation result, and the field order in parentheses cannot be changed.

For a specific implementation manner of the consistency check key and the integrity calculation, refer to the description of the foregoing embodiment, and details are not described herein again.

Step 360: After the eNodeB verifies that the signature of the MMEn is correct, the eNodeB generates an access network element temporary public-private key pair (y, yP) for key exchange and an eNodeB forward greeting message including an eNodeB forward random number, using the UE.ID. And the MMEn.ID, the MMEn exchange private key, the access network temporary private key, the terminal exchange public key, and the second temporary public key generate an access consistency check key, and use the access consistency check key pair UE_Hello and eNodeB The integrity calculation of the forward greeting message generates an access message integrity calculation result and sends Msg6 to the UE.

The message structure of the Msg6 is as follows:

Step 370: The UE receives the message Msg6, and uses the saved MMEo's signature certificate to verify the MMEo-UE.Sig. After the verification succeeds, the information in the Msg6, the GUTI, the first temporary public key (xP), the terminal exchange private key, and the first The second temporary private key (z) generates a second consistency check key.

The terminal generates a third consistency check key by using the information in the Msg6, the GUTI, the access network element temporary public key (yP), the terminal exchange private key, and the second temporary private key (z).

For a specific implementation manner of generating a consistency key, refer to the description of the foregoing embodiment, and details are not described herein again.

Further, the terminal will save CertMMEn.

Step 380: The UE uses the second consistency check key to perform integrity calculation on the MMEn forward hello message and the UE Hello, and generates a second message integrity calculation result, and sends the second message integrity calculation result to the first sent by the MMEn. The result of the message integrity calculation is compared. After the comparison is correct, the second message integrity calculation result is generated by using the generated second consistency check key to perform the second message integrity calculation on the MMEn forward greeting message and the UE Hello. To MMEn sends Msg7.

The message format of the Msg7 is as follows:

For a specific implementation manner of the message integrity calculation, reference may be made to the description of the foregoing embodiment, and details are not described herein again.

Step 390: After receiving the Msg7, the eNodeB uses the access consistency check key IK _eNB to perform the sixth message integrity calculation result on the MMEn forward hello message and the UE-Hello integrity calculation result, and the UE-eNodeB.Mic of the Msg7 After performing the comparison verification, after verifying correctly, send Msg8 to MMEn.

The message format is as follows:

UE-MMEnFinish // UE end information

The specific implementation manner of the eNodeB to generate the access consistency check key is the same as that in the previous embodiment, and the IK _eNB , the K _eNB , and the NK _{eNB are} generated, and extended according to the key extension method defined by the 3GPP.

Step 3100: After receiving the Msg8, the MMEn uses the first consistency check key IK _ASME to perform an integrity calculation on the MMEn forward hello message and the UE-Hello to generate a seventh message integrity calculation result, and the UE-MMEn of the Msg8. Mic performs verification verification.

The specific implementation of the step 3100 may be: but not limited to: calculating Key=Hash(h _U x||P _MMEn zP), using a key derivation function KDF (Key, GUTI, MMEn identifier MMEn.ID, terminal random number UE-MMEn. Nounce, MMEn random number MMEn-UE.Nounce) generates IK _ASME , K _ASME , and verifies that the MIC value of Msg5 is correct according to MIC (IK _ASME ), and then expands using the key system defined by 3GPP.

Step 3110: The MMEn sends the Msg9 to the eNodeB and the terminal.

If Msg8 is verified correctly, Msg9 is an authentication success message, otherwise it is a failure message.

Based on the same inventive concept as the method, the embodiment of the present application further provides a system for network authentication and authentication, and the structure thereof is as shown in FIG. 4, which specifically includes: an access network element 400, a first network element 401, and a second network element. 402, and terminal 403. The working principle of each device and the cooperation between the two are implemented as described in the foregoing method embodiments, and are not described here.

In the system provided by the embodiment of the present application, the authentication vector transmitted in the network is signed by the signature private key, and the authentication parties use the consistency check key to perform message integrity calculation, and then perform authentication by verifying the message integrity calculation result. The security of the authentication information in the delivery process and the reliability of the authentication are guaranteed.

Based on the same inventive concept as the method, the embodiment of the present application further provides a terminal, and the structure thereof is as shown in FIG. 5, which specifically includes: an authentication message sending module 501, an authentication module 502, a key generation module 503, and a message complete. Sex test Block 504. among them:

The authentication message sending module 501 is configured to generate a second temporary public-private key pair, and send a terminal greeting message and a terminal key exchange message to the access network element, where the terminal hello message includes a terminal identifier and a terminal random number, and the terminal confidentiality The key exchange message includes a second temporary public key;

The authentication module 502 is configured to verify the signature of the received authentication vector information by using the saved signature certificate of the second network element.

The key generation module 503 is configured to use the authentication vector information, the terminal identifier, the first temporary public key, the terminal exchange private key, and the second temporary after the authentication module 502 successfully verifies The private key generates a second consistency check key, and generates the authentication vector information, the terminal identifier, the access network element temporary public key, the terminal exchange private key, and the second temporary private key. Third consistency check key;

The message integrity check module 504 is configured to generate a second message integrity calculation result by performing message integrity calculation on the terminal hello message and the first network element forward greeting message by using the second consistency check key, The second message integrity calculation result is compared with the first message integrity calculation result sent by the first network element, and after the comparison is correct, the generated second consistency check key is used to the first network. Performing a second message integrity calculation on the second message integrity calculation to the hello greeting message and the terminal greeting message; using the third consistency check key to the terminal greeting message and accessing the network element forward The message integrity calculation is performed to generate a fourth message integrity calculation result, and the fourth message integrity calculation result is compared with the access message integrity calculation result sent by the access network element, and after the comparison is correct, Performing a message integrity calculation on the access network element forward greeting message and the terminal greeting message by using the generated third consistency check key to generate a fifth message integrity calculation result; Five message integrity calculation result is sent to the access network element, the integrity of the calculation result and the third message sent by the access network element to said first network element.

Preferably, the authentication vector information includes the first network element signature certificate and a verification result thereof, and the first network element signature certificate and the verification result thereof by using the signature private key of the second network element And performing the signature, the terminal further includes: a signature certificate saving module, configured to acquire and save the signature certificate of the first network element after the authentication module succeeds in verifying.

Preferably, the key generation module is configured to: verify the terminal random number in the authentication vector information, and perform point multiplication on the terminal exchange private key and the first temporary public key after the verification is successful. a first key seed, performing a point multiplication of the first network element exchange public key and the second temporary private key to calculate a second key seed, and performing one-way on the first key seed and the second key seed Calculating a first key; generating a second consistency check key by using the first key, the terminal identifier, the first network element identifier, the first network element forward random number, and the terminal random number; The terminal random number in the authentication vector information is verified. After the verification is successful, the terminal exchange private key is multiplied by the access network element temporary public key to calculate a fifth key seed, and the access network element exchanges the public key. Calculating a sixth key seed by performing dot multiplication with the second temporary private key, performing a one-way operation on the fifth key seed and the sixth key seed to obtain a second key; using the second secret The key, the terminal identifier, the access network element identifier, the forward random number of the access network element, and the terminal random number generate a third consistency check key.

Based on the same inventive concept as the method, the embodiment of the present application further provides an access network element, and the structure thereof is as shown in FIG.

The authentication message transmission module 601 is configured to receive a terminal hello message and a terminal key exchange message sent by the terminal, where the terminal hello message includes a terminal identifier and a terminal random number, and the terminal key exchange message includes a second temporary public key; Sending, by the first network element, the terminal hello message, the terminal key exchange message, and the access network element greeting message, where the access network element greeting message includes an access network element identifier and a backward random number of the access network element ;

The authentication module 602 is configured to generate an access network element temporary public-private key pair and an access network element forward greeting message including the access network element forward random number, and use the obtained authentication vector information, the second temporary public Key, the access network element exchange private key, and the access network element temporary private key generate an access consistency check key, and use the access consistency check key to the terminal greeting message and the access network. The integrity calculation of the incoming message to the hello message generates an access message integrity calculation result, and sends the authentication vector information, the access network element key exchange message including the access network element temporary public key, and the connection to the terminal. a network element forward greeting message, an access message integrity calculation result, the first network element forward greeting message, and the first message integrity calculation result; and using the access consistency check key to connect Performing message integrity calculation on the incoming message forward message and the terminal greeting message to generate a sixth message integrity calculation result, and verifying the fifth message integrity calculation result sent by the terminal by using the sixth message integrity calculation result, and verifying After the power is transmitted to the access network element terminal authentication success message.

Preferably, in the initial authentication phase, the authentication module is further configured to: exchange the access NE greeting message, the terminal identifier, the exchange public key of the terminal, the exchange public key of the access network element, and the exchange of the first network element. The signature of the public key is verified, so that after the verification succeeds, the first temporary public-private key pair and the first network element forward greeting message including the first network element forward random number are generated.

Preferably, in the tracking area update phase, the authentication vector information further includes the first network element signature certificate and a verification result thereof; when the access network element receives the authentication vector information, And receiving a signature of the first network element signature certificate and the verification result thereof by using the first network element signature private key; the authentication module generates the temporary network public key pair of the access network element and the forward random number including the access network element When the access NE forwards the message, it is specifically used to: use the signature certificate of the first network element to verify the signature, so that after the verification succeeds, the access network element temporary public-private key pair and the access are generated. The access NE forward greeting message of the network element forward random number.

Based on the foregoing any embodiment of the access network element, preferably, when the authentication module generates the access consistency check key, the method is specifically configured to: perform the access network element exchange private key and the second temporary public key. Calculating the seventh key seed by point multiplication, and multiplying the terminal exchange public key and the access network element temporary private key to calculate an eighth key seed, and the seventh key seed and the eighth key seed Performing a one-way operation to obtain a third key; generating a third consistency check key by using the third key, the terminal identifier, the access network element identifier, the access network element forward random number, and the terminal random number .

Based on the same inventive concept as the method, the embodiment of the present application further provides a first network element, and the structure thereof is as shown in FIG. 7 . Specifically, the authentication message transmission module 701, the authentication vector information acquisition module 702, and the authentication module 703 are included. among them:

The authentication message transmission module 701 is configured to receive a terminal hello message, a terminal key exchange message, and an access network element greeting message sent by the access network element, where the terminal hello message includes a terminal identifier and a terminal random number, where the terminal is dense The key exchange message includes a second temporary public key, where the access network element greeting message includes an access network element identifier and a backward random number of the access network element, and sends the terminal greeting message to the second network element, and the connection And a first network element backward greeting message, where the first network element includes a first network element, and then a random number and a first network element signature certificate;

The authentication vector information obtaining module 702 is configured to obtain the authentication vector information, where the information required to be verified by the terminal in the authentication vector information is signed by using the second network element signature private key;

The authentication module 703 is configured to generate a first temporary public-private key pair and a first network element forward greeting message including a first network element forward random number, and use the obtained authentication vector information, the second temporary public key, Generating a first consistency check key by using the first network element exchange private key and the first temporary private key, and using the first consistency check key to greet the terminal with the first network element Performing an integrity calculation on the hello calculation to generate a first message integrity calculation result, and sending the authentication vector information, the first network element key exchange message including the first temporary public key, and the first a network element forward greeting message and a first message integrity calculation result; and performing message integrity calculation on the first network element forward greeting message and the terminal greeting message using the first consistency check key to generate a seventh The result of the message integrity calculation is used to verify the third message integrity calculation result sent by the terminal by using the generated seventh message integrity calculation result; after the verification is successful, the first network element passes the access network element to the Terminal sending NE authentication success message.

Preferably, in the initial authentication phase of the terminal, the authentication module is further configured to verify, by using the saved certificate of the query center, the signature of the first network element to the greeting message, the terminal identifier, and the exchange public key of the terminal, so that After the verification succeeds, the first temporary public-private key pair and the first network element forward greeting message including the first network element forward random number are generated.

Preferably, when the authentication module generates the first consistency check key, it is specifically used to:

Calculating a third key seed by multiplying the first network element exchange private key and the second temporary public key, and multiplying the terminal exchange public key and the first temporary private key to calculate a fourth key seed Performing a one-way operation on the third key seed and the fourth key seed to obtain a fourth key;

And generating, by using the fourth key, the terminal identifier, the first network element identifier, the first network element forward random number, and the terminal random number, a first consistency check key.

Based on the same inventive concept as the method, the embodiment of the present application further provides a second network element, which is configured as shown in FIG. 8 , and specifically includes: an authentication vector information sending module 801, configured to send an authentication to the first network element. The vector information, the information that needs to be sent to the terminal in the authentication vector information is signed by using the second network element signature private key.

Preferably, in the initial authentication phase of the terminal, the authentication information sending module is specifically configured to:

Searching for the exchange public key of the terminal corresponding to the terminal identifier; sending the access NE greeting message, the first network element backward greeting message, the terminal identifier, and the exchange of the terminal to the query center The key is obtained by using the query center signature private key, the first network element backward greeting message, the signature certificate carrying the first network element, the verification result, the terminal identifier, and The signature of the exchanged public key of the terminal, the signature of the access NE greeting message by using the query center signature private key, the exchanged public key of the first network element, and the first network element identifier And the access public key of the access network element and the identifier of the access network element; after the signature of the query center is used to verify that the signature is correct, the authentication vector information is sent to the first network element, where the authentication is performed. The vector information includes: the exchange public key of the access network element, the exchange public key of the first network element, the terminal identifier, the exchange public key of the terminal, and the exchange of the terminal greeting message and the access network element by using the second network element signature private key The signature of the public key and the exchanged public key of the first network element, using the signature private key of the query center to access the network element greeting message, the terminal identifier, the exchange public key of the terminal, the exchange public key of the access network element, and the first The signature of the exchanged public key of the network element, using the signature private key of the query center, to sign the first network element to the greeting message, the terminal identifier, and the exchange public key of the terminal.

Based on the same inventive concept as the method, the embodiment of the present application further provides a query center, and the structure thereof is as shown in FIG. 9 , and specifically includes:

The information obtaining module 901 is configured to exchange the public key of the first network element corresponding to the first network element identifier, and verify the first network element signature certificate, and obtain the exchange of the access network element corresponding to the access network element identifier. Public key

The information sending module 902 is configured to generate a message carrying the first network element's signature certificate and the verification result, the terminal identifier, and the exchanged public key of the terminal, and sign the first network element to the hello message and the generated message. Signing the access NE greeting message, and the two signatures, the exchange public key of the first network element, the first network element identifier, and the exchange public key of the access network element The access network element identifier is sent to the second network element.

Those skilled in the art will appreciate that embodiments of the present application can be provided as a method, system, or computer program product. Thus, the present application can take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment in combination of software and hardware. Moreover, the application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) including computer usable program code.

The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the present application. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Means for implementing the functions specified in one or more of the flow or in a block or blocks of the flow chart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that the computer Or performing a series of operational steps on other programmable devices to produce computer-implemented processing such that instructions executed on a computer or other programmable device are provided for implementing a block in a flow or a flow and/or block diagram of the flowchart Or the steps of the function specified in multiple boxes.

While the preferred embodiment of the present application has been described, it will be apparent that those skilled in the art can make further changes and modifications to the embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and the modifications and

It is apparent that those skilled in the art can make various changes and modifications to the embodiments of the present application without departing from the spirit and scope of the embodiments of the present application. Thus, it is intended that the present invention cover the modifications and variations of the embodiments of the present invention.

Claims

A method for network authentication and authentication, comprising:

The terminal generates a second temporary public-private key pair, and sends a terminal hello message and a terminal key exchange message to the access network element, where the terminal hello message includes a terminal identifier and a terminal random number, and the terminal key exchange message includes the second temporary public key;

The access network element sends the terminal hello message, the terminal key exchange message, and the access network element hello message to the first network element, where the access network element hello message includes an access network element identifier and access The backward number of the network element;

The first network element sends the terminal hello message, the access network element greeting message, and the first network element backward greeting message to the second network element, where the first network element backward greeting message includes the first The network element returns a random number and a first network element to sign a certificate;

The second network element sends the authentication vector information to the first network element, where the information required for the terminal verification in the authentication vector information is signed by using the second network element signature private key;

The first network element acquires the authentication vector information;

The first network element generates a first temporary public-private key pair and a first network element forward greeting message including a first network element forward random number, and uses the obtained authentication vector information, the second temporary public key, and the Generating a first consistency check key by using the first network element exchange private key and the first temporary private key, and using the first consistency check key to send the terminal greeting message and the first network element forward The hello calculation of the hello message generates a first message integrity calculation result, and sends the authentication vector information, the first network element key exchange message including the first temporary public key, and the first network to the access network element. The meta-forward greeting message and the first message integrity calculation result;

The access network element generates an access network element temporary public-private key pair and an access network element forward greeting message including a forward random number of the access network element, and uses the obtained authentication vector information and the second temporary public key. The access network element exchange private key and the access network element temporary private key generate an access consistency check key, and use the access consistency check key to the terminal hello message and the access network element. Performing integrity calculation on the forward greeting message to generate an access message integrity calculation result, and transmitting the authentication vector information, the access network element key exchange message including the access network element temporary public key, and the access to the terminal a network element forward greeting message, an access message integrity calculation result, the first network element forward greeting message, and the first message integrity calculation result;

The terminal verifies the signature in the received authentication vector information by using the saved signature certificate of the second network element;

After the verification is successful, the terminal generates a second consistency check key by using the authentication vector information, the terminal identifier, the first temporary public key, the terminal exchange private key, and the second temporary private key. And generating, by using the authentication vector information, the terminal identifier, the access network element temporary public key, the terminal exchange private key, and the second temporary private key, a third consistency check key;

The terminal uses the second consistency check key to perform message integrity calculation on the terminal hello message and the first network element forward greeting message to generate a second message integrity calculation result, and complete the second message complete The result of the calculation is compared with the result of the first message integrity calculation sent by the first network element. After the comparison is correct, the generated second consistency check key is used to forward the first network element to the greeting message and The second message integrity calculation is performed by the terminal greeting message to generate a third message integrity calculation result;

The terminal uses the third consistency check key to perform message integrity calculation on the terminal hello message and the access network element forward greeting message to generate a fourth message integrity calculation result, and complete the fourth message complete The result of the calculation is compared with the calculation result of the integrity of the access message sent by the access network element. After the comparison is correct, the third consistency check key is used to access the NE forward greeting message and The terminal hello message performs a message integrity calculation to generate a fifth message integrity calculation result;

Transmitting the fifth message integrity calculation result to the access network element, and sending the third message integrity calculation result to the first network element by using the access network element;

The access network element uses the access consistency check key to perform a message integrity calculation on the access NE forward greeting message and the terminal hello message, and generates a sixth message integrity calculation result, using the sixth message complete. The result of the calculation is used to verify the result of the fifth message integrity calculation, and after the verification is successful, the access network element authentication success message is sent to the terminal;

The first network element performs a message integrity calculation on the first network element forward greeting message and the terminal greeting message by using the first consistency check key to generate a seventh message integrity calculation result, and uses the generated The seventh message integrity calculation result verifies the third message integrity calculation result; after the verification is successful, the first network element sends the first network element authentication success message to the terminal by using the access network element.
The method according to claim 1, wherein in the initial authentication phase of the terminal, the second network element sends the authentication vector information to the first network element, which specifically includes:

The second network element searches for an exchange public key of the terminal corresponding to the terminal identifier;

Sending, by the second network element, the access NE greeting message, the first network element backward greeting message, the terminal identifier, and the exchange public key of the terminal to the query center;

Obtaining, by the query center, the exchange public key of the first network element corresponding to the first network element identifier, and verifying the first network element signature certificate, and acquiring the exchange public key of the access network element corresponding to the access network element identifier Generating a message carrying the first network element's signature certificate and the verification result, the terminal identifier, and the exchanged public key of the terminal, and signing the first network element to the hello message and the generated message, for the access The NE greeting message is signed, and the two signatures, the exchange public key of the first network element, the first network element identifier, the exchange public key of the access network element, and the access network element Sending an identifier to the second network element;

After the second network element uses the signature certificate of the query center to verify that the signature is correct, the second network element sends the authentication vector information to the first network element, where the authentication vector information includes: an exchange public key of the access network element, The exchange public key of a network element, the terminal identifier, and the exchange public key of the terminal, the second network element signature private key, the terminal greeting message, the exchange public key of the access network element, and The signature of the exchanged public key of the first network element, using the signature private key of the query center to access the network element greeting message, the terminal identifier, the exchange public key of the terminal, the exchange public key of the access network element, and the first network element Exchange the signature of the public key, and use the signature private key of the query center to sign the first network element to the hello message, the terminal identifier, and the exchange public key of the terminal;

Before the first network element generates the first temporary public-private key pair and the first network element forward greeting message including the first network element forward random number, the method further includes:

The first network element uses the saved certificate of the query center to verify the signature of the first network element to the hello message, the terminal identifier, and the exchange public key of the terminal, so that after the verification succeeds, the first temporary public-private key pair is generated. a first network element forward greeting message including a forward random number of the first network element;

Before the access network element generates the access network element temporary public-private key pair and the access network element forward greeting message including the forward random number of the access network element, the method further includes:

The access network element verifies the signatures of the access NE greeting message, the terminal identifier, the exchange public key of the terminal, the exchange public key of the access network element, and the exchange public key of the first network element, so that after the verification succeeds, Generating a first temporary public-private key pair and a first network element forward greeting message including a first network element forward random number.
The method according to claim 2, wherein the authentication vector information further includes the first network element signature certificate and a verification result thereof, and the signature private key pair using the second network element a signature of the first network element signature certificate and the verification result thereof. After the terminal successfully verifies the signature of the received authentication vector information by using the saved signature certificate of the second network element, the method further includes: the terminal Obtaining and saving a signature certificate of the first network element;

and / or,

The authentication vector information further includes: the first network element signature certificate and a verification result thereof, and a signature of the first network element signature certificate and a verification result thereof by using a signature private key of the query center; When the access network element uses the signature certificate of the query center for verification, the method further includes: the access network element uses the saved signature certificate of the query center to sign the first network element and the verification result thereof. After the verification is successful, the signature of the first network element is saved.
The method according to claim 1, wherein in the tracking area update phase, the authentication vector information comprises:

The exchange public key of the access network element, the exchange public key of the first network element, the terminal identifier, the exchange public key of the terminal, the use of the signature private key of the second network element, the exchange of the terminal, the exchange of the public key of the access network element, and The signature of the exchanged public key of the first network element and the signature of the first network element to the greeting message, the terminal identifier, and the exchange public key of the terminal by using the second network element signature private key.
The method according to claim 4, wherein the authentication vector information further includes a first network element signature certificate and a verification result thereof, and the signature private key pair of the second network element is used to The signature of the network element signature certificate and the verification result thereof. After the terminal successfully verifies the signature of the received authentication vector information by using the saved signature certificate of the second network element, the method further includes: acquiring, by the terminal, Saving a signature certificate of the first network element;

and / or,

The authentication vector information further includes the first network element signature certificate and a verification result thereof;

When the first network element sends the authentication vector information, the first network element key exchange message, the first network element forward greeting message, and the first message integrity calculation result to the access network element, The access network element sends a signature of the first network element signature certificate and the verification result thereof by using the first network element signature private key;

The access network element generates an access network element temporary public-private key pair and an access network element forward greeting message including the forward random number of the access network element, including:

The access network element uses the signature certificate of the first network element to verify the signature, so that after the verification succeeds, the access network element temporary public-private key pair and the access random number of the access network element are generated. The NE forward greeting message.
The method according to any one of claims 2 to 5, wherein the terminal uses the authentication vector information, the terminal identifier, the first temporary public key, the terminal exchange private key, and the first The second temporary check key generates a second consistency check key, which specifically includes:

The terminal verifies the terminal random number in the authentication vector information. After the verification succeeds, the terminal exchange private key is multiplied by the first temporary public key to calculate the first key seed, and the first network element is obtained. Calculating a second key seed by performing a point multiplication between the exchange public key and the second temporary private key, and performing a one-way operation on the first key seed and the second key seed to obtain a first key;

The terminal generates a second consistency check key by using the first key, the terminal identifier, the first network element identifier, the first network element forward random number, and the terminal random number;

The terminal generates a third consistency check key by using the authentication vector information, the terminal identifier, the access network temporary public key, the terminal exchange private key, and the second temporary private key, which specifically includes :

The terminal verifies the terminal random number in the authentication vector information. After the verification succeeds, the terminal exchange private key is multiplied by the access network element temporary public key to calculate a fifth key seed, and the access is to be accessed. Calculating a sixth key seed by performing dot multiplication between the network element exchange public key and the second temporary private key, and performing a one-way operation on the fifth key seed and the sixth key seed to obtain a second key;

The terminal generates a third consistency check key by using the second key, the terminal identifier, the access network element identifier, the access network element forward random number, and the terminal random number;

The access network element generates an access consistency check key by using the obtained authentication vector information, the second temporary public key, the access network temporary private key, and the access network element exchange private key, specifically include:

The access network element performs a point multiplication by the access network element exchange private key and the second temporary public key to calculate a seventh key seed, and performs a point exchange public key and the access network element temporary private key. Multiplying the eighth key seed, performing a one-way operation on the seventh key seed and the eighth key seed to obtain a third key;

The access network element generates a third consistency check key by using the third key, the terminal identifier, the access network element identifier, the access network element forward random number, and the terminal random number;

The first network element generates a first consistency check key by using the obtained authentication vector information, the second temporary public key, the first network element exchange private key, and the first temporary private key. Specifically include:

The first network element calculates a third key seed by multiplying the first network element exchange private key and the second temporary public key, and performs point multiplication calculation on the terminal exchange public key and the first temporary private key. a fourth key seed, performing a one-way operation on the third key seed and the fourth key seed to obtain a fourth key;

The first network element generates a first consistency check key by using the fourth key, the terminal identifier, the first network element identifier, the first network element forward random number, and the terminal random number.
A terminal, comprising:

The authentication message sending module is configured to generate a second temporary public-private key pair, and send a terminal greeting message and a terminal key exchange message to the access network element, where the terminal hello message includes a terminal identifier and a terminal random number, and the terminal key The exchange message contains a second temporary public key;

An authentication module, configured to verify, by using the saved signature certificate of the second network element, the received signature in the authentication vector information;

a key generation module, configured to use the authentication vector information, the terminal identifier, the first temporary public key, the terminal exchange private key, and the second temporary private key after the authentication module succeeds Generating a second consistency check key, and generating a third by using the authentication vector information, the terminal identifier, the access network element temporary public key, the terminal exchange private key, and the second temporary private key Consistency check key;

a message integrity check module, configured to perform a message integrity calculation on the terminal hello message and the first network element forward greeting message by using the second consistency check key to generate a second message integrity calculation result, where The second message integrity calculation result is compared with the first message integrity calculation result sent by the first network element, and after the comparison is correct, the generated second consistency check key is used to match the first network element. Performing a second message integrity calculation on the forward message and the terminal greeting message to generate a third message integrity calculation result; using the third consistency check key to send the terminal greeting message and the access network element forward greeting The message integrity calculation is performed to generate a fourth message integrity calculation result, and the fourth message integrity calculation result is compared with the access message integrity calculation result sent by the access network element, and after the comparison is correct, the message is used. Generating the third consistency check key to generate a fifth message integrity calculation result by performing message integrity calculation on the access network element forward greeting message and the terminal greeting message; Message integrity calculation result is sent to the access network element, to the first network element and the third message is sent via the integrity evaluation result of the access network element.
The terminal according to claim 7, wherein the authentication vector information includes the first network element signature certificate and a verification result thereof, and the signature private key pair of the second network element is used. a network element signature certificate and a signature of the verification result thereof, the terminal further includes:

And a signature certificate saving module, configured to acquire and save a signature certificate of the first network element after the authentication module succeeds in verifying.
The terminal according to claim 8, wherein the key generation module is specifically configured to:

Verifying the terminal random number in the authentication vector information. After the verification succeeds, the terminal exchange private key is multiplied by the first temporary public key to calculate the first key seed, and the first network element is exchanged with the public key. Performing a point multiplication with the second temporary private key to calculate a second key seed, and performing a one-way operation on the first key seed and the second key seed to obtain a first key;

Generating a second consistency check key by using the first key, the terminal identifier, the first network element identifier, the first network element forward random number, and the terminal random number;

The terminal random number in the authentication vector information is verified. After the verification succeeds, the terminal exchange private key is multiplied by the access network element temporary public key to calculate a fifth key seed, and the access network element is exchanged. Calculating a sixth key seed by performing point multiplication on the public key and the second temporary private key, and performing a one-way operation on the fifth key seed and the sixth key seed to obtain a second key;

The third consistency check key is generated by using the second key, the terminal identifier, the access network element identifier, the access network element forward random number, and the terminal random number.
An access network element, comprising:

The authentication message transmission module is configured to receive a terminal greeting message and a terminal key exchange message sent by the terminal, where the terminal greeting message includes a terminal identifier and a terminal random number, and the terminal key exchange message includes a second temporary public key; The first network element sends the terminal hello message, the terminal key exchange message, and the access network element greeting message, where the access network element greeting message includes an access network element identifier and a backward random number of the access network element;

The authentication module is configured to generate an access network element temporary public-private key pair and an access network element forward greeting message including the access network element forward random number, and use the obtained authentication vector information and the second temporary public key The access network element exchange private key and the access network element temporary private key generate an access consistency check key, and use the access consistency check key to the terminal hello message and the access network element. Performing integrity calculation on the forward greeting message to generate an access message integrity calculation result, and transmitting the authentication vector information, the access network element key exchange message including the access network element temporary public key, and the access to the terminal a network element forward greeting message, an access message integrity calculation result, the first network element forward greeting message, and the first message integrity calculation result; and access using the access consistency check key pair The message integrity calculation is performed by the network element forward greeting message and the terminal greeting message to generate a sixth message integrity calculation result, and the sixth message integrity calculation result is used to verify the fifth message integrity calculation result sent by the terminal, and the verification result is verified. After the terminal to access network element transmits the authentication success message.
The access network element according to claim 10, wherein in the initial authentication phase, the authentication module is further configured to:

The access network element greeting message, the terminal identifier, the exchange public key of the terminal, the exchange public key of the access network element, and the signature of the exchange public key of the first network element are verified, so that after the verification succeeds, the first temporary public and private key is generated. Forwarding a message to the first network element that includes the first network element forward random number.
The access network element according to claim 10, wherein in the tracking area update phase, the method is The weight vector information further includes the first network element signature certificate and a verification result thereof; when the access network element receives the authentication vector information, the access network element further receives the first network element signature private key pair. a signature of the network element signature certificate and the verification result thereof; when the authentication module generates the access network element temporary public-private key pair and the access network element forward greeting message including the forward random number of the access network element, the specific use to:

The signature is verified by using the signature certificate of the first network element, so that after the verification succeeds, the access network element temporary public-private key pair and the access network element forward greeting message including the access network element forward random number are generated. .
The access network element according to claim 11 or 12, wherein when the authentication module generates an access consistency check key, it is specifically used to:

Calculating the seventh key seed by multiplying the access network element exchange private key and the second temporary public key, and multiplying the terminal exchange public key by the access network element temporary private key to calculate the eighth key a key seed, performing a one-way operation on the seventh key seed and the eighth key seed to obtain a third key;

The third consistency check key is generated by using the third key, the terminal identifier, the access network element identifier, the access network element forward random number, and the terminal random number.
A first network element, comprising:

The authentication message transmission module is configured to receive a terminal greeting message, a terminal key exchange message, and an access network element greeting message sent by the access network element, where the terminal hello message includes a terminal identifier and a terminal random number, and the terminal key The exchange message includes a second temporary public key, where the access network element greeting message includes an access network element identifier and a backward random number of the access network element, and sends the terminal hello message to the second network element, where the access message a network element greeting message and a first network element backward greeting message, where the first network element backwards greeting message includes a first network element, and then a random number and a first network element signature certificate;

The authentication vector information acquiring module is configured to obtain the authentication vector information, where the information required to be verified by the terminal in the authentication vector information is signed by using the second network element signature private key;

An authentication module, configured to generate a first temporary public-private key pair and a first network element forward greeting message including a first network element forward random number, using the obtained authentication vector information, the second temporary public key, and the Generating a first consistency check key by using the first network element exchange private key and the first temporary private key, and using the first consistency check key to send the terminal greeting message and the first network element forward The hello calculation of the hello message generates a first message integrity calculation result, and sends the authentication vector information, the first network element key exchange message including the first temporary public key, and the first network to the access network element. a meta-forward greeting message and a first message integrity calculation result; and performing a message integrity calculation on the first network element forward greeting message and the terminal greeting message using the first consistency check key to generate a seventh message The integrity calculation result is used to verify the third message integrity calculation result sent by the terminal by using the generated seventh message integrity calculation result; after the verification is successful, the first network element passes the access network element to the terminal Send first Yuan authentication success message.
The first network element according to claim 14, wherein in the initial authentication stage of the terminal, the authentication module is further configured to use the saved certificate of the query center to forward the first message to the hello message and the terminal identifier. And verifying the signature of the exchanged public key of the terminal, so that after the verification succeeds, the first temporary public-private key pair is generated and the first network element is included. Forward the message to the first network element of the random number.
The first network element according to claim 15, wherein when the authentication module generates the first consistency check key, it is specifically used to:

Calculating a third key seed by multiplying the first network element exchange private key and the second temporary public key, and multiplying the terminal exchange public key and the first temporary private key to calculate a fourth key seed Performing a one-way operation on the third key seed and the fourth key seed to obtain a fourth key;

And generating, by using the fourth key, the terminal identifier, the first network element identifier, the first network element forward random number, and the terminal random number, a first consistency check key.
A second network element, comprising:

The authentication vector information sending module is configured to send the authentication vector information to the first network element, where the information required for the terminal verification in the authentication vector information is signed by using the second network element signature private key.
The second network element according to claim 17, wherein in the initial authentication phase of the terminal, the authentication information sending module is specifically configured to:

Searching for the exchange public key of the terminal corresponding to the terminal identifier; sending the access NE greeting message, the first network element backward greeting message, the terminal identifier, and the exchange of the terminal to the query center The key is obtained by using the query center to sign the first network element and the signature message and the verification result, the terminal identifier, and the exchange public key of the terminal. Signing of the access NE greeting message by the signature private key, the exchange public key of the first network element, the first network element identifier, the exchange public key of the access network element, and the access The network element identifier is used to send the authentication vector information to the first network element, and the authentication vector information includes: an exchange public key of the access network element, the first network The exchange public key of the element, the terminal identifier, the exchange public key of the terminal, and the signature of the terminal greeting message, the exchange public key of the access network element, and the exchange public key of the first network element by using the second network element signature private key, Query center The private key pairs the access NE greeting message, the terminal identifier, the exchange public key of the terminal, the exchange public key of the access network element, and the exchange public key of the first network element, and use the signature private key pair of the query center. The signature of a network element to the greeting message, the terminal identifier, and the exchange public key of the terminal.
An inquiry center, comprising:

The information acquisition module is configured to exchange the public key of the first network element corresponding to the first network element identifier, and verify the first network element signature certificate, and obtain the exchange of the access network element corresponding to the access network element identifier. key;

The information sending module is configured to generate a message carrying the first network element's signature certificate and the verification result, the terminal identifier, and the exchanged public key of the terminal, and sign the first network element back greeting message and the generated message, Signing the access NE greeting message, the two signatures, the exchange public key of the first network element, the first network element identifier, the exchange public key of the access network element, and the The access network element identifier is sent to the second network element.